mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-12 21:42:20 +02:00
835 B
835 B
CVE-2021-24723
Description
The WP Reactions Lite WordPress plugin before 1.3.6 does not properly sanitize inputs within wp-admin pages, allowing users with sufficient access to inject XSS payloads within /wp-admin/ pages.
POC
Reference
- https://wpscan.com/vulnerability/0a46ae96-41e5-4b52-91c3-409f7387aecc
- https://wpscan.com/vulnerability/0a46ae96-41e5-4b52-91c3-409f7387aecc